Apr 16, 2026 02:13 AM
(This post was last modified: Apr 16, 2026 03:26 AM by Charlie Sheen.)
Hi everyone. For months now iv been working on a crypter that can crypt .NET and Native payload. My goal from the start was to make a crypter that can be optimized to work with many RAT and any other malware out here. By doing this, i wanted to give 100% certitude that my private methods can do bypass of most common RAT on the market.
Like other thinking only bypass defender 100% is the only thing they say to focus on. But what about other AV ? Most of computer now day are shipped directly with AV. So only Defender worldwide most av used is not true anymore. Even more about that : Most AV are free or Offer free trial.
After doing some research and implementing multiples way of evasion for different malware by just learning the way they working and how their are coded. Like assembly.LOAD used by .NET malware to load their plugin that must need AMSI Bypass. My work implement one approach : Not rely on only one methods. Because AV evolves every day, i wanted to make a solution that will take that in mind.
Just too much word to say only that : Here is the time of beta test of my crypter : All crypt are free. They use public stub shared between 3 peoples. I will implement differents techniques to aim to make a crypt FUD on most av on the market.
Just one thing before finishing my post : The more you malware is old and not updated, the more hard it will be to COMPLETELY achieve FUD.
And other thing to keep in mind : I have more good result on .NET malware then on Native : The reason is simple, Microsoft give us a good way to achieve In memory execution with Reflection and not using that at our advantage is simply stupid. Like people only relying on Process Hollowing oldest methods of the century(LOL), when Remote Function Hooking can do the job.
Thanks in advance guys.
Content deleted to prevent possible harm to our members. -Staff
(Can be contacted directly only on telegram or here in HF but you must send me the mp first. I will soon buy Uber to be able to do it myself Thank)
(Im not sure if i can put my tg here so, moderator please be kind and just delete it. So if its that case, people interesting in my beta test crypter, send me your tg by PM.)
Like other thinking only bypass defender 100% is the only thing they say to focus on. But what about other AV ? Most of computer now day are shipped directly with AV. So only Defender worldwide most av used is not true anymore. Even more about that : Most AV are free or Offer free trial.
After doing some research and implementing multiples way of evasion for different malware by just learning the way they working and how their are coded. Like assembly.LOAD used by .NET malware to load their plugin that must need AMSI Bypass. My work implement one approach : Not rely on only one methods. Because AV evolves every day, i wanted to make a solution that will take that in mind.
Just too much word to say only that : Here is the time of beta test of my crypter : All crypt are free. They use public stub shared between 3 peoples. I will implement differents techniques to aim to make a crypt FUD on most av on the market.
Just one thing before finishing my post : The more you malware is old and not updated, the more hard it will be to COMPLETELY achieve FUD.
And other thing to keep in mind : I have more good result on .NET malware then on Native : The reason is simple, Microsoft give us a good way to achieve In memory execution with Reflection and not using that at our advantage is simply stupid. Like people only relying on Process Hollowing oldest methods of the century(LOL), when Remote Function Hooking can do the job.
Thanks in advance guys.
Content deleted to prevent possible harm to our members. -Staff
(Can be contacted directly only on telegram or here in HF but you must send me the mp first. I will soon buy Uber to be able to do it myself Thank)
(Im not sure if i can put my tg here so, moderator please be kind and just delete it. So if its that case, people interesting in my beta test crypter, send me your tg by PM.)
The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.
Please familiarize yourself by reading our Help Documents.